Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/fwWS5AjTFpKQkS5vHySIiLeD5UU.roa
File: fwWS5AjTFpKQkS5vHySIiLeD5UU.roa (raw, json)
Hash identifier: 7GDsyk0XBm/fwWfEi9ofHc4Hb/C4sxFyt2KQoBoUIew=
Subject key identifier: 7F:05:92:E4:08:D3:16:92:90:91:2E:6F:1F:24:88:88:B7:83:E5:45
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 0193B5B78190CB4885B52BA2C1602AD0FABD
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/fwWS5AjTFpKQkS5vHySIiLeD5UU.roa
Signing time: Wed 11 Dec 2024 12:35:22 +0000
ROA not before: Wed 11 Dec 2024 12:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61128
IP address blocks: 185.16.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:b7:81:90:cb:48:85:b5:2b:a2:c1:60:2a:d0:fa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: Dec 11 12:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f0592e408d3169290912e6f1f248888b783e545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:86:b3:58:9a:0f:ea:58:80:76:d4:72:2f:
fe:f3:49:f5:af:4e:95:0b:d1:21:31:29:57:48:67:
44:b9:6d:1c:c3:ae:ed:c7:66:df:43:d3:25:cd:4d:
cc:a3:70:ad:66:2b:9e:0b:29:62:f7:2e:44:c3:9a:
33:64:9a:77:8a:42:43:d0:18:c9:d5:80:41:fc:b6:
0e:37:8d:a8:29:3b:69:e7:97:9b:5d:54:3a:52:4c:
46:d8:a1:a9:52:4d:8e:6c:19:dd:44:b8:3c:73:39:
25:43:2e:34:45:14:b1:19:02:7d:82:9f:24:fd:d6:
2a:29:ce:63:18:b2:7d:38:60:b6:39:af:73:9f:ef:
11:d1:c0:52:53:e3:03:8d:ab:71:58:af:b5:3b:d3:
76:d1:04:30:74:d7:4f:73:f0:e8:55:06:b3:96:04:
31:d3:79:c4:f6:4b:5d:6a:44:2d:20:99:17:17:07:
90:30:96:2b:b7:5c:4d:02:74:21:de:4a:8d:fe:aa:
0c:ae:76:f2:65:5f:ec:04:44:a9:c4:ef:db:7e:c0:
2b:b0:d2:44:39:4d:6c:0f:26:66:9f:11:f0:e3:77:
f6:74:34:a6:95:44:28:12:a2:20:74:8a:52:9d:bd:
56:94:33:93:0f:1a:85:09:94:8e:a7:65:31:0a:0e:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:05:92:E4:08:D3:16:92:90:91:2E:6F:1F:24:88:88:B7:83:E5:45
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/fwWS5AjTFpKQkS5vHySIiLeD5UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.157.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b1:ce:5c:3d:8a:be:a2:e9:40:f2:aa:51:06:8c:c8:a2:9c:
ca:a1:9d:20:3e:11:96:c1:2b:f9:84:6f:fd:bd:2d:e3:94:3a:
c5:a1:db:52:65:4c:78:f0:c2:b1:e9:76:cb:1a:f3:17:ba:41:
03:62:de:b2:fb:42:07:b5:5a:88:ea:f3:15:fd:80:c1:ce:49:
d0:60:a5:a9:e4:d5:5d:e9:62:0f:c7:e1:d8:f2:f0:96:87:9e:
ee:b9:aa:90:5e:5f:fa:10:f7:e8:d8:a0:2a:82:96:d2:c7:9e:
f4:6b:18:34:18:55:6d:5d:e4:4a:60:bf:9f:aa:d8:4d:22:a2:
c7:00:db:10:b9:6e:10:44:b7:47:2d:a9:3b:25:12:a1:c9:3e:
12:5d:27:58:cf:9e:d4:2c:1c:ed:3d:f8:23:dc:e0:ae:00:2c:
d6:39:32:e5:fd:03:c7:8c:29:44:db:fb:0a:c6:fe:ed:02:56:
54:b2:ea:a9:c7:43:cc:3a:f5:c1:ab:2b:23:15:49:13:2f:37:
66:00:5a:65:7c:1f:de:11:a0:cf:f4:d0:5b:d2:57:6f:b1:f7:
f0:20:e9:79:8c:ca:8b:7e:7e:38:51:40:01:7d:b8:f0:22:82:
11:05:75:c1:8b:22:e2:ba:45:07:d3:5d:bc:0f:0a:e1:25:0d:
55:26:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:12:37 2025 by rpki-client